Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: Ooc7dWe07hTkNyaBrQEljaNbqvO5JfoOYdYPeryDpMg=
Subject key identifier: E6:B3:D3:F3:F2:7B:FB:90:A4:98:27:C8:6C:35:43:2B:F9:38:B2:10
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019E1DC71F019593A8C6DA31596AFD4960C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 1023
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: sePTyasU00OTogSIGYUp+DvOHCyQ7F2DJvZhUhBaOFI=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1f:01:95:93:a8:c6:da:31:59:6a:fd:49:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=e6b3d3f3f27bfb90a49827c86c35432bf938b210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:3d:53:3d:ca:48:09:ac:d0:61:2a:fb:08:
91:34:6e:77:10:81:c1:0d:ef:86:e3:79:7f:28:c8:
2e:8d:e5:56:e9:69:6f:30:08:70:95:87:d3:bd:03:
e3:4c:67:70:d7:04:8b:cb:ab:6f:68:44:54:2b:52:
bf:b6:27:5d:f5:6b:d8:e0:6e:58:c2:0a:3c:a5:8a:
bb:92:9a:cd:5a:7f:60:13:b5:8f:06:7a:30:92:af:
45:25:1c:05:da:3b:3c:d1:8c:01:b1:ca:bc:a7:46:
c3:05:46:5c:9c:c2:06:a7:c3:16:9b:ba:89:3d:c0:
c6:e6:ee:79:ea:c0:81:a5:d2:7b:9f:83:eb:fb:6c:
9b:8d:b8:62:a5:4a:d9:39:b5:12:60:e0:d7:2d:aa:
17:77:8d:1e:b8:13:eb:a0:e4:95:f8:2c:25:4d:ea:
39:d3:e0:44:1e:3c:0f:ba:f7:a1:7b:3d:51:f5:bd:
66:05:28:b7:7e:f2:ca:cd:bc:2d:a2:18:f7:92:4c:
b1:ff:e2:fb:c4:14:5e:2d:41:30:4a:54:af:80:17:
ed:b2:9b:c3:9e:56:e3:59:61:5e:8c:aa:3f:3d:7d:
f5:d9:3f:76:4e:5a:1e:c5:cc:ae:b3:4c:08:89:b3:
c1:23:d1:97:c0:01:9a:a1:a5:88:f2:01:2b:1a:93:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:D3:F3:F2:7B:FB:90:A4:98:27:C8:6C:35:43:2B:F9:38:B2:10
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:28:71:f7:11:9a:00:c7:85:ae:de:e0:f7:21:a6:f9:14:
f7:14:99:09:c0:e8:79:1b:da:34:c5:41:b2:3a:a6:9f:23:05:
54:b2:43:cb:42:84:bc:d9:1b:4c:40:5a:db:ce:1b:48:6e:d5:
8d:26:ce:49:63:4d:28:04:86:c8:c8:ab:b2:39:d3:84:0f:18:
68:4f:5a:8e:53:85:eb:9f:13:ae:d6:95:12:3e:6c:b6:8d:ca:
45:cd:7b:ed:9e:7b:84:43:93:ac:64:aa:30:98:50:5f:84:64:
dc:36:e3:e3:29:87:16:7f:48:54:0b:a2:58:fd:65:3a:da:bf:
3d:86:59:3c:c1:5d:bb:69:48:a3:b2:4a:b7:b6:98:ac:40:c4:
b5:6e:dc:e3:e2:87:8e:88:ff:86:2e:c8:0e:26:2f:63:95:97:
b8:47:7d:84:a2:35:19:0f:7f:4d:d3:b4:cd:d4:84:b7:ed:3a:
27:53:be:f3:98:e9:69:48:57:3c:d1:5a:cd:de:17:77:53:41:
e9:e5:10:86:4f:22:05:fb:2d:62:e2:90:6c:94:b8:a4:c9:e4:
c4:98:27:08:1a:2d:df:ce:ed:f4:78:81:25:be:93:ba:b7:8c:
63:18:66:f0:c8:14:e4:fd:af:28:47:a4:e7:f5:f9:a8:09:5b:
b9:41:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:03 2026 by rpki-client